Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144311.roa
File: AS144311.roa (raw, json)
Hash identifier: cWpiCUJIYhs/LJZFqsEunH1Fl7Ny67QiOWJHKgxqBp0=
Subject key identifier: BB:F8:A9:2E:F7:12:79:4B:0E:A7:DE:AA:AF:D9:24:B2:A4:30:0E:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 502429E906407C06359035EE0AC1D177427BB7B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144311.roa
Signing time: Mon 25 May 2026 03:19:10 +0000
ROA not before: Mon 25 May 2026 03:14:10 +0000
ROA not after: Mon 24 May 2027 03:19:10 +0000
asID: 144311
IP address blocks: 240a:a67d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:24:29:e9:06:40:7c:06:35:90:35:ee:0a:c1:d1:77:42:7b:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:10 2026 GMT
Not After : May 24 03:19:10 2027 GMT
Subject: CN=BBF8A92EF712794B0EA7DEAAAFD924B2A4300E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:29:af:de:d7:7d:17:35:c8:c2:7b:6e:d6:
22:36:0e:d2:2c:90:76:8f:96:42:58:5b:33:bd:6b:
f3:66:f8:f6:19:ac:78:38:cd:a0:97:85:d5:ae:c7:
8c:75:d8:8f:cd:73:41:e0:43:61:17:79:75:12:3c:
99:24:b8:d2:e8:36:d6:e4:16:96:1c:4b:83:f1:8d:
fc:04:8f:9a:e2:4c:9e:96:84:66:ef:82:d8:58:8f:
7d:5c:4a:a5:8b:44:12:e7:c9:a3:e4:39:33:46:d2:
08:18:44:eb:42:f1:cc:33:67:df:fb:c6:38:9a:7e:
ee:65:d8:11:e6:82:18:20:cc:32:85:a7:fa:50:ed:
6d:86:f3:f6:27:a9:36:68:57:2f:f8:bd:a4:21:b0:
5c:5c:08:e3:49:35:75:78:18:19:f5:47:17:7a:37:
9a:7c:a4:19:a4:53:b5:ca:53:1e:e4:5d:3e:55:11:
a5:24:01:35:d8:89:8c:2a:00:74:2f:f1:8c:80:80:
d2:90:b4:22:1d:90:22:df:89:b5:9a:22:3c:30:b3:
c4:d3:29:8a:d3:15:60:aa:10:b3:2b:e6:19:41:ed:
06:d0:62:7f:53:22:fe:35:69:31:17:80:20:0d:cd:
7c:72:a2:af:95:ca:c3:b3:a1:cf:21:20:91:3b:8c:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:A9:2E:F7:12:79:4B:0E:A7:DE:AA:AF:D9:24:B2:A4:30:0E:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a67d::/32
Signature Algorithm: sha256WithRSAEncryption
32:9e:1e:5c:71:c1:cf:11:29:84:25:0b:ae:4c:70:64:82:a8:
e6:bc:11:7a:b5:23:b9:3d:fa:fb:51:78:59:2d:84:bf:7a:4e:
35:e7:c1:32:b2:fb:7e:d5:e2:3f:9f:2b:80:9e:98:f0:a7:89:
bf:0a:48:d5:87:d2:9e:77:64:ff:38:78:d8:1a:2f:f4:6e:3f:
cf:84:d1:c8:3b:d3:50:dc:63:4c:08:02:6e:06:5c:06:a6:b0:
ec:92:e7:8e:b7:fb:ad:c4:90:f9:46:0f:e2:1c:10:97:56:9f:
24:b7:b8:92:16:19:ab:8f:c0:4e:5d:f4:ec:ee:b3:7a:ca:88:
ac:f5:bd:96:3b:78:de:19:24:37:76:5b:66:38:10:e8:a7:6e:
1d:b1:63:e5:74:35:cd:10:08:70:73:16:8f:f4:90:ed:92:1e:
03:7b:81:68:66:b6:14:7a:f1:24:31:61:b7:8f:21:a6:a0:d2:
b7:e0:48:fa:05:9e:b6:1a:1f:96:a0:de:5a:80:94:bb:b7:5f:
dd:51:29:32:62:9f:72:21:b4:fc:05:6d:e4:5b:4b:78:aa:4d:
41:eb:d7:56:20:36:f1:df:2d:68:b0:c6:d0:b0:f4:4b:45:f9:
35:bc:b7:89:ff:b2:56:da:dc:7d:a2:25:ef:5a:6a:23:e9:d8:
50:b4:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client